Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: o2GRibNzg6koULAcI/KhNaXdpX31gKKMAyiL0pIM0yA=
Subject key identifier: 18:CF:F5:A5:2E:20:5D:5E:EA:79:47:E0:5A:A0:E4:1D:CE:DC:7B:2A
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 0196790D54296FB96E83871F4A91B3358859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 04AD
Signing time: Sun 27 Apr 2025 21:00:38 +0000
Manifest this update: Sun 27 Apr 2025 21:00:38 +0000
Manifest next update: Mon 28 Apr 2025 21:00:38 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: L3A2pvWLR7QTGLgOF0GMzstfb8T8Ki2jgGRHEYbHiig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:54:29:6f:b9:6e:83:87:1f:4a:91:b3:35:88:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Apr 27 21:00:38 2025 GMT
Not After : Apr 28 21:00:38 2025 GMT
Subject: CN=18cff5a52e205d5eea7947e05aa0e41dcedc7b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:91:a4:df:4f:94:a7:29:c6:4a:97:10:1d:
98:aa:5d:8b:73:74:e7:b6:41:97:0d:5b:33:57:5a:
c7:be:55:25:36:3d:46:e5:78:d6:06:82:0b:b9:a0:
36:66:36:54:03:95:69:6e:1d:e3:d4:68:31:11:77:
a9:b1:31:b3:88:dc:5d:37:19:46:2c:b1:4b:65:65:
df:6d:7e:e6:77:be:85:a2:02:ad:c0:9f:cb:f3:33:
aa:e6:2f:65:b6:49:75:c8:d9:29:9c:ad:66:9a:f5:
aa:9d:cb:3b:8e:51:a8:93:ad:1e:3c:91:27:fd:81:
45:a6:c5:7e:55:07:d3:1d:8d:64:ca:45:2b:61:e6:
1f:b2:52:b4:c5:cf:e4:6b:86:1b:64:0e:0f:47:f1:
8a:b3:4f:f8:60:ac:d3:19:c3:5c:e5:ff:2b:9d:76:
de:9c:6b:57:49:0b:bf:7c:23:89:cf:06:cb:69:46:
65:26:89:47:49:13:0a:c9:2c:4e:a0:b3:3b:a3:fd:
e2:a7:65:76:48:82:3c:9d:1d:c3:6a:95:27:e4:4c:
69:09:52:e4:88:b7:e1:1e:b3:d4:66:51:4f:e2:5c:
fb:58:ab:5c:a6:6c:08:46:b3:bd:7f:30:12:f2:d2:
52:a9:ee:c9:63:a3:18:bc:9e:ee:66:f4:1d:d7:97:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:F5:A5:2E:20:5D:5E:EA:79:47:E0:5A:A0:E4:1D:CE:DC:7B:2A
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d3:97:16:d0:a9:38:26:eb:70:2e:ee:8e:05:b0:44:51:38:
ee:84:99:54:37:21:99:2b:3d:39:6d:f3:11:cf:3f:21:ac:77:
a2:2d:b1:61:1a:20:e0:f7:a3:8a:5b:a3:65:6a:40:46:78:fe:
cb:00:5d:b2:29:86:60:49:4a:80:c2:e0:1b:d0:2b:2c:03:c6:
37:df:1e:f1:80:d5:98:5c:c3:10:ae:68:af:fc:b4:4e:c9:b3:
43:5e:bf:e6:c4:8f:39:98:42:6d:7e:a1:c8:a9:a6:05:50:bb:
d7:7f:54:d7:93:36:bd:7f:a3:1c:12:6f:9e:80:65:5a:a7:56:
ea:88:da:7d:e6:24:73:16:5f:0f:9c:6d:4b:ec:bd:2c:37:0e:
e1:63:ed:64:df:38:2f:e5:ea:f7:b2:41:7e:a0:0a:50:5e:26:
df:ee:94:a5:32:37:a8:f6:21:71:42:4d:96:f4:05:38:93:de:
28:5a:a2:33:8a:0f:f2:5d:53:b6:99:da:66:b7:96:56:16:d8:
7e:08:54:55:1a:d7:a7:29:60:9d:f0:f9:ec:7a:4e:76:0e:36:
ac:d2:3d:db:5f:03:c5:10:27:bc:17:94:17:7f:c2:b5:ef:a4:
fb:40:b0:fc:32:82:d0:1f:99:2e:47:8b:40:71:67:2c:66:84:
92:2a:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:23 2025 by rpki-client